Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 17:58:43.328 00:00:10.374 TCP 23.104.0.1:56148 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:54:52.560 00:05:03.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 17:58:58.223 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53972 10 6452 1 2025-11-04 17:59:43.734 00:00:10.348 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:55:52.562 00:05:03.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 17:59:58.440 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55854 10 6452 1 2025-11-04 18:00:44.105 00:00:10.359 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:00:58.606 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45858 10 6452 1 2025-11-04 18:01:44.504 00:00:10.376 TCP 23.104.0.1:59978 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:01:58.819 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58012 10 6452 1 2025-11-04 18:02:41.598 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:02:41.685 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:02:44.913 00:00:10.365 TCP 23.104.0.1:38926 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:02:59.035 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35342 10 6452 1 2025-11-04 18:03:45.315 00:00:10.892 TCP 23.104.0.1:43306 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:03:59.246 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52862 10 6452 1 2025-11-04 18:00:52.563 00:05:03.095 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 18:04:46.247 00:00:10.366 TCP 23.104.0.1:37836 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:04:59.461 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37378 10 6452 1 2025-11-04 18:01:52.564 00:05:03.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 18:05:46.650 00:00:10.368 TCP 23.104.0.1:36914 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:05:59.673 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40726 10 6452 1 2025-11-04 18:06:47.091 00:00:16.199 TCP 23.104.0.1:44020 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:06:59.883 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37428 10 6452 1 2025-11-04 18:07:41.687 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:07:41.684 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:07:53.332 00:00:10.364 TCP 23.104.0.1:58392 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:08:00.115 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32774 12 6556 1 2025-11-04 18:08:53.737 00:00:10.369 TCP 23.104.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:09:00.344 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50934 10 6452 1 2025-11-04 18:09:54.144 00:00:10.362 TCP 23.104.0.1:34354 -> 1.101.0.1:3000 12 1559 1 2025-11-04 18:10:00.559 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56312 10 6452 1 2025-11-04 18:06:52.563 00:05:03.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 18:10:54.545 00:00:10.363 TCP 23.104.0.1:44314 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:11:00.731 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6452 1 2025-11-04 18:07:52.565 00:05:03.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 18:11:54.948 00:00:10.371 TCP 23.104.0.1:34824 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:12:00.956 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50212 10 6452 1 2025-11-04 18:12:41.836 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:12:41.751 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:12:55.360 00:00:10.366 TCP 23.104.0.1:52824 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:13:01.190 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41476 10 6452 1 2025-11-04 18:13:55.764 00:00:10.905 TCP 23.104.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:14:01.401 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:56680 11 6504 1 2025-11-04 18:14:56.710 00:00:10.368 TCP 23.104.0.1:54984 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:15:01.667 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42872 10 6452 1 2025-11-04 18:15:57.121 00:00:10.322 TCP 23.104.0.1:43860 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:16:01.882 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:52034 10 6452 1 2025-11-04 18:12:52.564 00:05:03.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 18:16:57.481 00:00:10.363 TCP 23.104.0.1:60294 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:17:02.079 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55018 10 6452 1 2025-11-04 18:17:42.854 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:17:42.824 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:13:52.566 00:05:03.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 18:17:57.882 00:00:10.341 TCP 23.104.0.1:33892 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:18:02.290 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45296 10 6452 1 2025-11-04 18:18:58.259 00:00:10.402 TCP 23.104.0.1:57586 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:19:02.500 00:00:10.930 TCP 1.101.0.1:3000 -> 22.102.0.1:34552 10 6452 1 2025-11-04 18:19:58.676 00:00:10.376 TCP 23.104.0.1:41842 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:20:03.471 00:00:10.299 TCP 1.101.0.1:3000 -> 22.102.0.1:40278 13 6608 1 2025-11-04 18:20:59.106 00:00:10.373 TCP 23.104.0.1:57260 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:21:03.813 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45912 10 6452 1 2025-11-04 18:21:59.513 00:00:10.320 TCP 23.104.0.1:33490 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:22:04.072 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52870 10 6452 1 2025-11-04 18:22:42.423 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:22:42.447 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:18:52.565 00:05:03.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 18:22:59.871 00:00:10.364 TCP 23.104.0.1:49488 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:23:04.281 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50004 10 6452 1 2025-11-04 18:19:52.570 00:05:03.090 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 18:24:00.271 00:00:10.332 TCP 23.104.0.1:34384 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:24:04.494 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55178 10 6452 1 2025-11-04 18:25:00.637 00:00:10.368 TCP 23.104.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:25:04.709 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45732 10 6452 1 2025-11-04 18:26:01.055 00:00:10.325 TCP 23.104.0.1:41846 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:26:04.921 00:00:10.441 TCP 1.101.0.1:3000 -> 22.102.0.1:53484 10 6452 1 2025-11-04 18:27:01.416 00:00:10.365 TCP 23.104.0.1:48822 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:27:05.399 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52086 10 6452 1 2025-11-04 18:27:42.135 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:27:42.181 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:28:01.819 00:00:10.372 TCP 23.104.0.1:44202 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:28:05.613 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:55102 10 6452 1 2025-11-04 18:24:52.568 00:05:03.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 18:29:05.799 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55430 10 6452 1 2025-11-04 18:29:02.228 00:00:10.327 TCP 23.104.0.1:40944 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:25:52.571 00:05:03.090 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 18:30:06.007 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44918 10 6452 1 2025-11-04 18:30:02.592 00:00:10.379 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:31:06.225 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46672 10 6452 1 2025-11-04 18:31:03.015 00:00:10.363 TCP 23.104.0.1:33852 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:32:03.418 00:00:10.326 TCP 23.104.0.1:53046 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:32:06.434 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53116 10 6452 1 2025-11-04 18:32:42.192 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:32:42.177 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:33:06.655 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56786 10 6452 1 2025-11-04 18:33:03.784 00:00:10.367 TCP 23.104.0.1:47522 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:34:04.193 00:00:10.452 TCP 23.104.0.1:46766 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:34:06.883 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36958 10 6452 1 2025-11-04 18:30:52.569 00:05:03.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 18:35:04.679 00:00:10.326 TCP 23.104.0.1:58306 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:35:07.103 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33490 10 6452 1 2025-11-04 18:31:52.572 00:05:03.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 18:36:05.044 00:00:10.361 TCP 23.104.0.1:56790 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:36:07.314 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52274 10 6452 1 2025-11-04 18:37:05.444 00:00:10.361 TCP 23.104.0.1:54092 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:37:07.548 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46084 10 6452 1 2025-11-04 18:37:42.226 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:37:42.329 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:38:05.845 00:00:10.386 TCP 23.104.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:38:07.762 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54046 10 6452 1 2025-11-04 18:39:06.269 00:00:10.366 TCP 23.104.0.1:35208 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:39:07.972 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:54830 10 6452 1 2025-11-04 18:40:08.218 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:39038 11 6504 1 2025-11-04 18:40:06.679 00:00:10.373 TCP 23.104.0.1:44916 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:36:52.571 00:05:03.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 18:41:07.109 00:00:10.382 TCP 23.104.0.1:36152 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:41:08.516 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56400 10 6452 1 2025-11-04 18:37:52.575 00:05:03.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 18:42:08.744 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44194 10 6452 1 2025-11-04 18:42:07.532 00:00:10.369 TCP 23.104.0.1:45696 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:42:42.517 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:42:42.302 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:43:08.974 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:40358 10 6452 1 2025-11-04 18:43:07.939 00:00:10.370 TCP 23.104.0.1:60512 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:44:09.237 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39918 10 6452 1 2025-11-04 18:44:08.352 00:00:10.369 TCP 23.104.0.1:52008 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:45:09.458 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60868 10 6452 1 2025-11-04 18:45:08.751 00:00:10.325 TCP 23.104.0.1:42522 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:46:09.114 00:00:10.319 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:46:09.638 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52126 10 6452 1 2025-11-04 18:42:52.571 00:05:03.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 18:47:09.472 00:00:10.361 TCP 23.104.0.1:60736 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:47:09.850 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37824 10 6452 1 2025-11-04 18:47:42.306 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:47:42.641 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:43:52.574 00:05:03.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 18:48:10.035 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43254 10 6452 1 2025-11-04 18:48:09.890 00:00:10.370 TCP 23.104.0.1:53050 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:49:10.304 00:00:10.361 TCP 23.104.0.1:56874 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:49:10.248 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34500 10 6452 1 2025-11-04 18:50:10.711 00:00:10.361 TCP 23.104.0.1:60610 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:50:10.463 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58688 10 6452 1 2025-11-04 18:51:11.113 00:00:10.367 TCP 23.104.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:51:10.671 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52658 10 6452 1 2025-11-04 18:52:11.521 00:00:10.363 TCP 23.104.0.1:56516 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:52:10.885 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54972 10 6452 1 2025-11-04 18:52:42.363 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:52:42.822 00:00:00.014 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:48:52.578 00:05:03.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 18:53:11.117 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36366 10 6452 1 2025-11-04 18:53:11.932 00:00:10.374 TCP 23.104.0.1:55858 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:49:52.579 00:05:03.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 18:54:11.327 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50244 10 6452 1 2025-11-04 18:54:12.343 00:00:10.360 TCP 23.104.0.1:53046 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:55:11.545 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50954 10 6452 1 2025-11-04 18:55:12.743 00:00:10.362 TCP 23.104.0.1:37204 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:56:11.761 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38458 10 6452 1 2025-11-04 18:56:13.143 00:00:10.327 TCP 23.104.0.1:33566 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:57:11.975 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:54814 10 6452 1 2025-11-04 18:57:13.511 00:00:10.366 TCP 23.104.0.1:35026 -> 1.101.0.1:3000 11 1507 1 2025-11-04 18:57:42.544 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 18:57:42.669 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 18:58:12.182 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49530 10 6452 1 2025-11-04 18:58:13.916 00:00:10.382 TCP 23.104.0.1:57638 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498764, total packets: 1580, avg bps: 1046, avg pps: 0, avg bpp: 315 Time window: 2025-11-04 17:54:52 - 2025-11-04 18:58:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0018s Wall: 0.0024s flows/second: 68247.4 Runtime: 0.0024s